---
title: "SonarQube Cloud MCP server for AI agents - actionlake"
description: "Give Claude 302 SonarQube Cloud actions through one MCP server: permissions, qualityprofiles. Your agent never holds the credential. 100,000 calls a month free."
canonical: https://actionlake.com/connectors/sonarqube-cloud
updated: 2026-10-23
---

Connectors · Identity & security

# SonarQube Cloud MCP server for AI agents.

actionlake is an MCP gateway: one remote MCP server that connects Claude and other MCP clients to SonarQube Cloud and the rest of your systems. It gives your agent 302 SonarQube Cloud actions (148 reads, 103 writes and 51 that wait for a confirmation) and holds the SonarQube Cloud credential itself, so the agent never does. It paces SonarQube Cloud's limits and records every call.

[Connect SonarQube Cloud free](https://actionlake.com/console?start=sandbox) [See pricing](https://actionlake.com/pricing)

100,000 free calls a month. No card, no email, no password: press Start a free sandbox on the next screen and keep the key it shows you.

`claude mcp add --transport http actionlake https://connect.actionlake.com/mcp`

the first call

```
do {
  action: "sonarqube_cloud.user_tokens.search",
  intent: "check which SonarQube Cloud account is connected"
}
# User tokens: search · read · 1 upstream call
```

- 302 actions in one signed file
- 148 read look, never change
- 103 write create and update
- 51 wait for a yes destructive, confirmed first

Set up

## Connect SonarQube Cloud in three steps.

1. 01
   ### Add actionlake to Claude.
   Run the command once in Claude Code; its consent page can create a free sandbox: 100,000 calls a month, no card. In the Claude app, add a custom connector with the URL below and paste your key on the consent page. Creating a new sandbox from the Claude app is not yet tested by us.
   `https://connect.actionlake.com/mcp`
2. 02
   ### Connect SonarQube Cloud.
   Bearer token. No consent screen: your agent can connect it for you, but the key then passes through your chat. To keep it out of the model's context, paste it in the console instead. actionlake stores what you paste write-only, sealed under your tenant's key.
   - `access_token` SonarQube Cloud token
   - `region` Your SonarQube Cloud region
   ```
   account { op: "connections.requirements", service: "sonarqube_cloud" }
   # free: exactly what to paste, and what is found for you
   ```
3. 03
   ### Make the first call. Check before a write.
   Ask in plain words; Claude picks the action. Before anything changes, `check` validates the call and prices it, for free.
   ```
   do    { action: "sonarqube_cloud.user_tokens.search" }
   # user tokens: search · read · 1 upstream call
   check { action: "sonarqube_cloud.groups_v2.create", input: { … } }
   # free: inputs, permissions, cost and confirmations, nothing sent
   ```

SonarQube Cloud at a glance

**Sign-in**

Bearer token. No consent screen: your agent can connect it for you, but the key then passes through your chat. To keep it out of the model's context, paste it in the console instead.

**You provide**

`access_token`

**Setup fields**

`region`

**Limits we pace to**

600 calls a minute, per connection

**API covered**

SonarQube Cloud Web API (api/webservices/list, fetched 2026-10-23) and Web API v2 (11 OpenAPI documents on api-docs.sonarsource.com), at your SonarQube Cloud instance's API base URL, which you enter when connecting

**Built from**

SonarQube Cloud's documentation, read 23 October 2026[sonarcloud.io](https://sonarcloud.io/api/webservices/list?include_internals=false) [api-docs.sonarsource.com](https://api-docs.sonarsource.com/sonarqube-cloud/default/landing)

**Service file**

Version 1.0.0, signed (Ed25519)

**Cached reads**

145 of 148 reads, for up to 5 minutes; a write clears what it affects

**Shared entities**

4, so ask can line SonarQube Cloud up with your other systems

**Data**

Processed and stored in Sydney, Australia. No US region yet

Capabilities

## What an AI agent can do in SonarQube Cloud.

302 actions in 104 areas. Every one carries its effect, so a key can allow the reads and hold the rest.

- **148** read look, never change
- **103** write create and update
- **51** destructive wait for a confirmation

1. ### Permissions
   17
   1 read · 10 write · 6 destructive
   Permissions: add group · Permissions: add group to template · Permissions: add project creator to template · Permissions: add user
2. ### Qualityprofiles
   16
   4 read · 8 write · 4 destructive
   Qualityprofiles: activate rule · Qualityprofiles: activate rules · Qualityprofiles: add project · Qualityprofiles: changelog
3. ### Qualitygates
   15
   5 read · 7 write · 3 destructive
   Qualitygates: copy · Qualitygates: create · Qualitygates: create condition · Qualitygates: list
4. ### Issues
   13
   4 read · 8 write · 1 destructive
   Issues: search · Issues: add comment · Issues: authors · Issues: tags
5. ### Sca issue releases
   13
   4 read · 8 write · 1 destructive
   Add a comment to an issue-release pair · Search for issue-release pairs · Get the list of users assigned to at least one issue in a given branch · Update the assignee of an (issue,release) pair
6. ### Project analyses
   7
   1 read · 3 write · 3 destructive
   Project analyses: create event · Project analyses: search · Project analyses: set baseline · Project analyses: update event
7. ### Projects
   7
   1 read · 4 write · 2 destructive
   Projects: search · Projects: create · Projects: bulk update key · Projects: update key
8. ### Sca license profiles
   7
   2 read · 4 write · 1 destructive
   Create new license profile · List license profiles · Get the license policy for a given profile · Update the license profile

**96 more areas · 207 actions**

- User groups **7**
- Portfolio permission templates **6**
- Webhooks **6**
- Dashboards **5**
- Enterprises **5**
- Organization contacts **5**
- Portfolios **5**
- Quality gates V2 **5**
- Rules **5**
- Ce **4**
- Groups V2 **4**
- Quality gate conditions **4**
- Settings **4**
- Components **3**
- Enterprise members **3**
- Enterprise organizations **3**
- Favorites **3**
- Hotspots **3**
- Idp group mappings **3**
- Measures **3**
- Metrics **3**
- Notifications **3**
- Organization token resource links **3**
- Organization tokens **3**
- Organizations **3**
- Portfolio group roles **3**
- Portfolio permission template roles **3**
- Portfolio users **3**
- Project branches **3**
- Project links **3**
- Project report subscriptions **3**
- Quality gate project associations **3**
- Roles **3**
- Sensor cache **3**
- User tokens **3**
- Aica projects **2**
- Authentication **2**
- Built in dashboards **2**
- Ip allowlists **2**
- Portfolio security reports **2**
- Project pull requests **2**
- Project tags **2**
- Projects V2 **2**
- Quality gate defaults **2**
- Quality gate settings **2**
- Sca releases **2**
- Security reports **2**
- Sources **2**
- Users V2 **2**
- Webservices **2**
- AI code assurances **1**
- Analyses **1**
- Analysis active rules **1**
- Analysis engine **1**
- Analysis jres **1**
- Analysis statuses **1**
- Audit logs **1**
- Compliance reports **1**
- Current user enterprise roles **1**
- Current user portfolio roles **1**
- Duplications **1**
- Enterprise candidates **1**
- Idp groups **1**
- Issue count history **1**
- Issue density history **1**
- Issue resolution history **1**
- Languages **1**
- Measures history **1**
- Organization groups **1**
- Organization members **1**
- Portfolio children **1**
- Portfolio computed project measures **1**
- Portfolio computed projects **1**
- Portfolio hierarchies **1**
- Portfolio measures **1**
- Portfolio metrics **1**
- Portfolio organizations **1**
- Portfolio projects **1**
- Portfolio reports **1**
- Portfolio tags **1**
- Project issue counts **1**
- Project issue density **1**
- Project issue resolution **1**
- Project keys **1**
- Project measures **1**
- Project organization facets **1**
- Project sca resolution **1**
- Project tags V2 **1**
- Properties **1**
- Regulatory reports **1**
- Sca reanalysis **1**
- Sca resolution history **1**
- Sca risk reports **1**
- Sca sbom reports **1**
- Scanner status **1**
- Users **1**

Top actions

## The SonarQube Cloud API, shaped for agents.

The ids your agent types, what each does, and the one name it shares with other systems. 24 of SonarQube Cloud's 24 action names are shared with at least one other connector, so an agent learns them once.

| Action | What it does | Effect | Same name in |
| --- | --- | --- | --- |
| `sonarqube_cloud.users_v2.list` Search for users | Search for users | read | `identity.user.list` 474 connectors |
| `sonarqube_cloud.groups_v2.list` Search for groups | Search for groups | read | `identity.group.list` 262 connectors |
| `sonarqube_cloud.groups_v2.create` Create group | Create group | write | `identity.group.create` 205 connectors |
| `sonarqube_cloud.user_groups.create` User groups: create | Create a group. | write | `identity.group.create` 205 connectors |
| `sonarqube_cloud.users_v2.get` Get a user by ID | Get a user by ID | read | `identity.user.get` 399 connectors |
| `sonarqube_cloud.user_tokens.generate` User tokens: generate | Generate a user access token. | write | `identity.api_key.create` 100 connectors |
| `sonarqube_cloud.user_tokens.search` User tokens: search | List the access tokens of the authenticated user. | read | `identity.api_key.list` 96 connectors |
| `sonarqube_cloud.roles.list` Get roles | Get roles | read | `identity.role_assignment.list` 41 connectors |
| `sonarqube_cloud.project_branches.list` Project branches: list | List the branches of a project. | read | `devops.branch.list` 12 connectors |
| `sonarqube_cloud.project_pull_requests.list` Project pull requests: list | List the pull requests of a project. | read | `devops.pull_request.list` 12 connectors |
| `sonarqube_cloud.audit_logs.list` Download audit logs | Download audit logs | read | `security.audit_log.list` 69 connectors |
| `sonarqube_cloud.project_branches.delete` Project branches: delete | Delete a non-main branch of a project. | destructive | `devops.branch.delete` 9 connectors |

Try it

## Prompts to paste into Claude.

Each one names the SonarQube Cloud actions it will call, so you know what it reads and what it changes before you send it.

1. Read read
   Give me a one-line status for every active SonarQube Cloud project.
   calls `sonarqube_cloud.projects.search`
2. Write write
   Create group in SonarQube Cloud. Show me exactly what you will send before you save it.
   calls `sonarqube_cloud.groups_v2.create`

Governance for SonarQube Cloud

## Destructive actions wait for a yes.

51 SonarQube Cloud actions are destructive. The first 10:

- Delete a group and its membership `sonarqube_cloud.groups_v2.delete`
- User groups: delete `sonarqube_cloud.user_groups.delete`
- Project branches: delete `sonarqube_cloud.project_branches.delete`
- Project pull requests: delete `sonarqube_cloud.project_pull_requests.delete`
- Webhooks: delete `sonarqube_cloud.webhooks.delete`
- Projects: delete `sonarqube_cloud.projects.delete`
- User tokens: revoke `sonarqube_cloud.user_tokens.revoke`
- Projects: bulk delete `sonarqube_cloud.projects.bulk_delete`
- Qualitygates: destroy `sonarqube_cloud.qualitygates.destroy`
- Issues: delete comment `sonarqube_cloud.issues.delete_comment`

A destructive action runs only with `confirm: true`. Under the `human` policy the agent cannot confirm for itself: the run stops until a named person approves, in the console or from a signed link in an email. The cap on a key is refused before the call is sent, never after.

do sonarqube_cloud.groups_v2.delete confirm_policy: **human**

Delete a group and its membership?

**intent:** the user asked me to delete a group and its membership

run suspended · waiting for a named person · key _sonarqube-cloud-agent_ cannot confirm itself

In the console, or from an emailed signed link.

a key for this connector

```
account {
  op: "keys.create", name: "sonarqube-cloud-agent",
  allowed_actions: ["sonarqube_cloud.*"], cap_calls: 2000,
  confirm_policy: "human_for_writes",
  approval_rules: [
    { match: "sonarqube_cloud.groups_v2.delete", approver: "lead@example.com" },
    { match: "sonarqube_cloud.user_groups.delete", approver: "lead@example.com" },
    { match: "sonarqube_cloud.project_branches.delete", approver: "lead@example.com" }
  ]
}
```

Illustrative. Scoped to SonarQube Cloud only, capped at 2,000 upstream calls, every write confirmed, and the destructive ones approved by a named person.

Cost

## What SonarQube Cloud costs on actionlake.

Every SonarQube Cloud action is one upstream call, the only thing actionlake bills. Searching, `check`, `cost`, `account` and any call SonarQube Cloud refused with 401, 403, 429 or a 5xx are free. Paid plans start at US$49 a month for 250,000 calls, with overage from US$0.30 down to US$0.18 per 1,000.

- 1 upstream call per action all 302 SonarQube Cloud actions
- 302 actions page each page of a long list is one call
- 145 reads can be cached a cache hit costs nothing
- 100,000 calls a month, free paid plans from US$49 a month for 250,000

[See pricing](https://actionlake.com/pricing)

Action index

## Every SonarQube Cloud action.

302 actions by area: the id your agent calls, what it does, and its effect.

**Permissions 17**

- `sonarqube_cloud.permissions.add_group` Permissions: add group write
- `sonarqube_cloud.permissions.add_group_to_template` Permissions: add group to template write
- `sonarqube_cloud.permissions.add_project_creator_to_template` Permissions: add project creator to template write
- `sonarqube_cloud.permissions.add_user` Permissions: add user write
- `sonarqube_cloud.permissions.add_user_to_template` Permissions: add user to template write
- `sonarqube_cloud.permissions.apply_template` Permissions: apply template write
- and 11 more in this area

**Qualityprofiles 16**

- `sonarqube_cloud.qualityprofiles.activate_rule` Qualityprofiles: activate rule write
- `sonarqube_cloud.qualityprofiles.activate_rules` Qualityprofiles: activate rules write
- `sonarqube_cloud.qualityprofiles.add_project` Qualityprofiles: add project write
- `sonarqube_cloud.qualityprofiles.changelog` Qualityprofiles: changelog read
- `sonarqube_cloud.qualityprofiles.change_parent` Qualityprofiles: change parent write
- `sonarqube_cloud.qualityprofiles.copy` Qualityprofiles: copy write
- and 10 more in this area

**Qualitygates 15**

- `sonarqube_cloud.qualitygates.copy` Qualitygates: copy write
- `sonarqube_cloud.qualitygates.create` Qualitygates: create write
- `sonarqube_cloud.qualitygates.create_condition` Qualitygates: create condition write
- `sonarqube_cloud.qualitygates.list` Qualitygates: list read
- `sonarqube_cloud.qualitygates.delete_condition` Qualitygates: delete condition destructive
- `sonarqube_cloud.qualitygates.deselect` Qualitygates: deselect destructive
- and 9 more in this area

**Issues 13**

- `sonarqube_cloud.issues.add_comment` Issues: add comment write
- `sonarqube_cloud.issues.authors` Issues: authors read
- `sonarqube_cloud.issues.search` Issues: search read
- `sonarqube_cloud.issues.tags` Issues: tags read
- `sonarqube_cloud.issues.assign` Issues: assign write
- `sonarqube_cloud.issues.bulk_change` Issues: bulk change write
- and 7 more in this area

**Sca issue releases 13**

- `sonarqube_cloud.sca_issue_releases.add_comment` Add a comment to an issue-release pair write
- `sonarqube_cloud.sca_issue_releases.assign` Update the assignee of an (issue,release) pair write
- `sonarqube_cloud.sca_issue_releases.assign_patch` Update the assignee of an (issue,release) pair write
- `sonarqube_cloud.sca_issue_releases.list` Search for issue-release pairs read
- `sonarqube_cloud.sca_issue_releases.list_assignees` Get the list of users assigned to at least one issue in a given branch read
- `sonarqube_cloud.sca_issue_releases.change_status` Transition an issue-release pair to a new status write
- and 7 more in this area

**Project analyses 7**

- `sonarqube_cloud.project_analyses.create_event` Project analyses: create event write
- `sonarqube_cloud.project_analyses.search` Project analyses: search read
- `sonarqube_cloud.project_analyses.set_baseline` Project analyses: set baseline write
- `sonarqube_cloud.project_analyses.update_event` Project analyses: update event write
- `sonarqube_cloud.project_analyses.delete` Project analyses: delete destructive
- `sonarqube_cloud.project_analyses.delete_event` Project analyses: delete event destructive
- and 1 more in this area

**Projects 7**

- `sonarqube_cloud.projects.bulk_update_key` Projects: bulk update key write
- `sonarqube_cloud.projects.create` Projects: create write
- `sonarqube_cloud.projects.search` Projects: search read
- `sonarqube_cloud.projects.update_key` Projects: update key write
- `sonarqube_cloud.projects.bulk_delete` Projects: bulk delete destructive
- `sonarqube_cloud.projects.delete` Projects: delete destructive
- and 1 more in this area

**Sca license profiles 7**

- `sonarqube_cloud.sca_license_profiles.create` Create new license profile write
- `sonarqube_cloud.sca_license_profiles.get` Get the license policy for a given profile read
- `sonarqube_cloud.sca_license_profiles.list` List license profiles read
- `sonarqube_cloud.sca_license_profiles.update` Update the license profile write
- `sonarqube_cloud.sca_license_profiles.delete` Delete the license profile destructive
- `sonarqube_cloud.sca_license_profiles.update_category_policy` Update the policy for a license category write
- and 1 more in this area

**User groups 7**

- `sonarqube_cloud.user_groups.create` User groups: create write
- `sonarqube_cloud.user_groups.delete` User groups: delete destructive
- `sonarqube_cloud.user_groups.search` User groups: search read
- `sonarqube_cloud.user_groups.update` User groups: update write
- `sonarqube_cloud.user_groups.add_user` User groups: add user write
- `sonarqube_cloud.user_groups.remove_user` User groups: remove user destructive
- and 1 more in this area

**Portfolio permission templates 6**

- `sonarqube_cloud.portfolio_permission_templates.apply` Apply a portfolio permission template to a portfolio write
- `sonarqube_cloud.portfolio_permission_templates.create` Create portfolio permission template write
- `sonarqube_cloud.portfolio_permission_templates.get` Get portfolio permission template by id read
- `sonarqube_cloud.portfolio_permission_templates.list` Get portfolio permission templates by enterprise read
- `sonarqube_cloud.portfolio_permission_templates.delete` Delete a portfolio permission template destructive
- `sonarqube_cloud.portfolio_permission_templates.update` Update portfolio permission template details write

**Webhooks 6**

- `sonarqube_cloud.webhooks.create` Webhooks: create write
- `sonarqube_cloud.webhooks.deliveries` Webhooks: deliveries read
- `sonarqube_cloud.webhooks.list` Webhooks: list read
- `sonarqube_cloud.webhooks.update` Webhooks: update write
- `sonarqube_cloud.webhooks.delete` Webhooks: delete destructive
- `sonarqube_cloud.webhooks.delivery` Webhooks: delivery read

**Dashboards 5**

- `sonarqube_cloud.dashboards.create` Create a new dashboard write
- `sonarqube_cloud.dashboards.get` Get a dashboard by its id read
- `sonarqube_cloud.dashboards.list` List dashboards for a resource read
- `sonarqube_cloud.dashboards.update` Update a dashboard write
- `sonarqube_cloud.dashboards.delete` Delete a dashboard destructive

**Enterprises 5**

- `sonarqube_cloud.enterprises.create` Create an enterprise write
- `sonarqube_cloud.enterprises.get` Get an enterprise by Id read
- `sonarqube_cloud.enterprises.list` List of enterprises read
- `sonarqube_cloud.enterprises.update` Update enterprise details write
- `sonarqube_cloud.enterprises.delete` Delete an enterprise destructive

**Organization contacts 5**

- `sonarqube_cloud.organization_contacts.create` Add organization contact write
- `sonarqube_cloud.organization_contacts.get` Get organization contact read
- `sonarqube_cloud.organization_contacts.list` Organization contacts read
- `sonarqube_cloud.organization_contacts.update` Update organization contact write
- `sonarqube_cloud.organization_contacts.delete` Delete organization contact destructive

**Portfolios 5**

- `sonarqube_cloud.portfolios.create` Create new enterprise portfolio write
- `sonarqube_cloud.portfolios.get` Get a portfolio read
- `sonarqube_cloud.portfolios.list` Returns a list of enterprise portfolios that the user has access to read
- `sonarqube_cloud.portfolios.update` Modify a portfolio write
- `sonarqube_cloud.portfolios.delete` Delete a portfolio destructive

**Quality gates V2 5**

- `sonarqube_cloud.quality_gates_v2.create` Create a Quality Gate write
- `sonarqube_cloud.quality_gates_v2.get` Get a Quality gate read
- `sonarqube_cloud.quality_gates_v2.list` Search for Quality gates read
- `sonarqube_cloud.quality_gates_v2.update` Patch a Quality gate write
- `sonarqube_cloud.quality_gates_v2.delete` Delete a Quality gate destructive

**Rules 5**

- `sonarqube_cloud.rules.repositories` Rules: repositories read
- `sonarqube_cloud.rules.search` Rules: search read
- `sonarqube_cloud.rules.show` Rules: show read
- `sonarqube_cloud.rules.tags` Rules: tags read
- `sonarqube_cloud.rules.update` Rules: update write

**Ce 4**

- `sonarqube_cloud.ce.activity` Ce: activity read
- `sonarqube_cloud.ce.activity_status` Ce: activity status read
- `sonarqube_cloud.ce.component` Ce: component read
- `sonarqube_cloud.ce.task` Ce: task read

**Groups V2 4**

- `sonarqube_cloud.groups_v2.create` Create group write
- `sonarqube_cloud.groups_v2.delete` Delete a group and its membership destructive
- `sonarqube_cloud.groups_v2.list` Search for groups read
- `sonarqube_cloud.groups_v2.update` Update a group write

**Quality gate conditions 4**

- `sonarqube_cloud.quality_gate_conditions.create` Add a condition to a quality gate write
- `sonarqube_cloud.quality_gate_conditions.delete` Delete a quality gate condition destructive
- `sonarqube_cloud.quality_gate_conditions.list` Get the conditions for a quality gate read
- `sonarqube_cloud.quality_gate_conditions.update` Update a quality gate condition write

**Settings 4**

- `sonarqube_cloud.settings.list_definitions` Settings: list definitions read
- `sonarqube_cloud.settings.reset` Settings: reset destructive
- `sonarqube_cloud.settings.set` Settings: set write
- `sonarqube_cloud.settings.values` Settings: values read

**Components 3**

- `sonarqube_cloud.components.search` Components: search read
- `sonarqube_cloud.components.show` Components: show read
- `sonarqube_cloud.components.tree` Components: tree read

**Enterprise members 3**

- `sonarqube_cloud.enterprise_members.create` Add user roles within an enterprise write
- `sonarqube_cloud.enterprise_members.delete` Delete user roles within an enterprise destructive
- `sonarqube_cloud.enterprise_members.list` Search for users in organizations that are part of an enterprise read

**Enterprise organizations 3**

- `sonarqube_cloud.enterprise_organizations.create` Add an organization to an enterprise write
- `sonarqube_cloud.enterprise_organizations.delete` Remove an organization from an enterprise destructive
- `sonarqube_cloud.enterprise_organizations.list` List enterprise organizations read

**Favorites 3**

- `sonarqube_cloud.favorites.add` Favorites: add write
- `sonarqube_cloud.favorites.remove` Favorites: remove destructive
- `sonarqube_cloud.favorites.search` Favorites: search read

**Hotspots 3**

- `sonarqube_cloud.hotspots.change_status` Hotspots: change status write
- `sonarqube_cloud.hotspots.search` Hotspots: search read
- `sonarqube_cloud.hotspots.show` Hotspots: show read

**Idp group mappings 3**

- `sonarqube_cloud.idp_group_mappings.create` Create IdP group mapping write
- `sonarqube_cloud.idp_group_mappings.delete` Delete IdP group mapping destructive
- `sonarqube_cloud.idp_group_mappings.list` List IdP group mappings read

**Measures 3**

- `sonarqube_cloud.measures.component` Measures: component read
- `sonarqube_cloud.measures.component_tree` Measures: component tree read
- `sonarqube_cloud.measures.search_history` Measures: search history read

**Metrics 3**

- `sonarqube_cloud.metrics.domains` Metrics: domains read
- `sonarqube_cloud.metrics.search` Metrics: search read
- `sonarqube_cloud.metrics.types` Metrics: types read

**Notifications 3**

- `sonarqube_cloud.notifications.add` Notifications: add write
- `sonarqube_cloud.notifications.list` Notifications: list read
- `sonarqube_cloud.notifications.remove` Notifications: remove destructive

Organization token resource links **3** Organization tokens **3** Organizations **3** Portfolio group roles **3** Portfolio permission template roles **3** Portfolio users **3** Project branches **3** Project links **3** Project report subscriptions **3** Quality gate project associations **3** Roles **3** Sensor cache **3** User tokens **3** Aica projects **2** Authentication **2** Built in dashboards **2** Ip allowlists **2** Portfolio security reports **2** Project pull requests **2** Project tags **2** Projects V2 **2** Quality gate defaults **2** Quality gate settings **2** Sca releases **2** Security reports **2** Sources **2** Users V2 **2** Webservices **2** AI code assurances **1** Analyses **1** Analysis active rules **1** Analysis engine **1** Analysis jres **1** Analysis statuses **1** Audit logs **1** Compliance reports **1** Current user enterprise roles **1** Current user portfolio roles **1** Duplications **1** Enterprise candidates **1** Idp groups **1** Issue count history **1** Issue density history **1** Issue resolution history **1** Languages **1** Measures history **1** Organization groups **1** Organization members **1** Portfolio children **1** Portfolio computed project measures **1** Portfolio computed projects **1** Portfolio hierarchies **1** Portfolio measures **1** Portfolio metrics **1** Portfolio organizations **1** Portfolio projects **1** Portfolio reports **1** Portfolio tags **1** Project issue counts **1** Project issue density **1** Project issue resolution **1** Project keys **1** Project measures **1** Project organization facets **1** Project sca resolution **1** Project tags V2 **1** Properties **1** Regulatory reports **1** Sca reanalysis **1** Sca resolution history **1** Sca risk reports **1** Sca sbom reports **1** Scanner status **1** Users **1**

This index shows a sample of each area. All 302 actions, with their inputs and prices, are in the [catalogue](https://actionlake.com/console/catalogue), which a free sandbox key can search.

Questions

## The SonarQube Cloud MCP server, answered.

**Is there a SonarQube Cloud MCP server for Claude?**

Yes. actionlake is an MCP gateway: a remote MCP server that gives Claude, or another MCP client, 302 SonarQube Cloud actions across permissions, qualityprofiles, qualitygates and issues, through the same eight tools it uses for every other connector. actionlake is independent; it is not made or endorsed by SonarQube Cloud.

**What do I need to connect SonarQube Cloud?**

SonarQube Cloud token. Plus your region. The free call account { op: "connections.requirements", service: "sonarqube_cloud" } lists exactly what to paste.

**Can an AI agent delete or change things in SonarQube Cloud?**

Only if its key allows it, and only with an explicit confirmation. 51 SonarQube Cloud actions are destructive, including delete a group and its membership, user groups: delete and project branches: delete. Each runs only with confirm: true. Under the human confirm policy, or an approval rule on the key, the run waits until a named person approves it.

**Will an AI agent use up my SonarQube Cloud API limit?**

actionlake paces every call to the limits in the SonarQube Cloud service file: 600 calls a minute per connection. Repeated reads are answered from cache (145 SonarQube Cloud actions can be), which never reaches SonarQube Cloud.

**What does a SonarQube Cloud action cost?**

One upstream call, the only unit actionlake bills. A list that pages bills one call per page (302 SonarQube Cloud actions page). Cache hits, searches, dry runs and calls SonarQube Cloud refused with 401, 403, 429 or a 5xx are free. The Free plan includes 100,000 calls a month with no card. Paid plans start at US$49 a month for 250,000 calls, with overage from US$0.30 down to US$0.18 per 1,000.

**Which SonarQube Cloud API does it cover?**

The SonarQube Cloud Web API (api/webservices/list, fetched 2026-10-23) and Web API v2 (11 OpenAPI documents on api-docs.sonarsource.com) at your SonarQube Cloud instance's API base URL, which you enter when connecting. It is built from SonarQube Cloud's documentation as read on 23 October 2026. 302 actions in 104 areas, each one in the signed service file (version 1.0.0).

**Does actionlake keep my SonarQube Cloud data, and where?**

actionlake processes and stores data in Sydney, Australia; there is no US region yet. Reads may be cached for up to 5 minutes, and a write clears the reads it affects. Each run's request and response is kept, sealed, for your plan's trace window: 1 day on Free, 3 days on Starter, 7 days on Pro, 14 days on Team, 30 days on Business and 30 days on Enterprise. Your SonarQube Cloud credential is sealed under your tenant's key, never logged and never returned. Your traffic is not used to train models.

**Which AI clients can use it?**

Claude Code, tested by us end to end, and the Claude app as a custom connector, tested by us with an existing key. Other MCP clients that support remote servers over Streamable HTTP (MCP revisions 2025-06-18 and 2025-11-25) and OAuth dynamic client registration, or a bearer header, should connect the same way; we have not tested them. Or plain REST, under the same action names.

## More connectors like SonarQube Cloud

Shares the most action names with

- [WorkOS 13](https://actionlake.com/connectors/workos)
- [GitGuardian 9](https://actionlake.com/connectors/gitguardian)
- [Aikido Security 7](https://actionlake.com/connectors/aikido-security)
- [Socket 7](https://actionlake.com/connectors/socket)
- [Bitwarden 7](https://actionlake.com/connectors/bitwarden)
- [Cloudflare 6](https://actionlake.com/connectors/cloudflare)

Joins with, on shared entities

- [Azure DevOps Services 4](https://actionlake.com/connectors/azure-devops-services)
- [LaunchDarkly 4](https://actionlake.com/connectors/launchdarkly)
- [Sentry 4](https://actionlake.com/connectors/sentry)
- [HaloPSA 3](https://actionlake.com/connectors/halopsa)
- [GitLab 3](https://actionlake.com/connectors/gitlab)
- [Odoo 3](https://actionlake.com/connectors/odoo)

Browse

- [All Identity & security connectors](https://actionlake.com/connectors/category/identity-and-security)
- [All connectors](https://actionlake.com/connectors)
- [How actionlake compares](https://actionlake.com/compare)

actionlake is independent. It is not made or endorsed by SonarQube Cloud; the name is the vendor's own. Counts are from the SonarQube Cloud service file, version 1.0.0.

## Give your agent SonarQube Cloud today.

[Connect SonarQube Cloud free](https://actionlake.com/console?start=sandbox) [See pricing](https://actionlake.com/pricing)

Start free - 100,000 calls/month, no card. No signup. Hard caps on every key. Cached answers are free.

---

Source: https://actionlake.com/connectors/sonarqube-cloud
More: https://actionlake.com/llms.txt
